[Snyk] Upgrade parse-url from 8.0.0 to 8.1.0

[snyk-bot]

Snyk has created this PR to upgrade parse-url from 8.0.0 to 8.1.0.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 1 version ahead of your current version.
• The recommended version was released 3 months ago, on 2022-08-30.

The recommended version fixes:

Severity	Issue	PriorityScore (*)	Exploit Maturity
	Improper Input Validation SNYK-JS-PARSEURL-3024398	571/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 5	Proof of Concept
	Server-side Request Forgery (SSRF) SNYK-JS-PARSEURL-3023021	571/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 5	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: parse-url

• 8.1.0 - 2022-08-30
  

  [email protected]

  • fix: cjs to load normalize-url /cc #58
  • fix: Include index.d.ts in package.json /cc #63
  • feat: support custom SSH username /cc #60
  • feat: improve regex pattern /cc #59

  Thanks to @ privatenumber and @ briancoit for their contributions! 🍰

• 8.0.0 - 2022-08-03
  

  parse-url 8.0.0

  Breaking Changes

  • The resource property will not contain the port, but the host one will.
  • Throw an error if the input is invalid. Hence, file paths like /home/path/to/dir will only be valid if the file:// protocol is added (file://home/path/to/dir)
  • Throw an error if the input length exceeds the maximum length (parse.MAX_URL_LENGTH), by default 2048.

  Fixes

  • fix file protocol spoofing #48, thanks @ vovikhangcdv!
  • fix: support hyphens in git@ URLs (#50) #51, thanks @ crenshaw-dev!
  • fix: support dot in git@ URLS #52, thanks @ GalHalupSeaLights!

  Other changes

  • build: add CommonJS distribution thanks to @ privatenumber! /cc #54 🍰

from parse-url GitHub release notes

Commit messages

Package name: parse-url

• 4412976 Updated docs
• ac17353 Merge branch 'patch-1' of github.com:briancoit/parse-url into new-version
• 778a0a5 Merge branch 'support-custom-user' of github.com:privatenumber/parse-url into new-version
• 0baab4f Merge branch 'improve-regex' of github.com:privatenumber/parse-url into new-version
• d1a4395 Merge branch 'fix-cjs' of github.com:privatenumber/parse-url into new-version
• 9cacf38 ⬆️ 8.1.0 🎉
• 9a78bd8 Merge pull request #61 from privatenumber/move-funding-yml
• 1883136 Include index.d.ts in package
• 92f899b chore: move FUNDING.yml out of workflows
• 9500430 feat: support custom user in ssh url
• 881ecb4 feat: improve regex pattern
• c2735c9 test: use cjs file
• c93b4ae fix: cjs to load normalize-url
• 110cdaa Merge pull request #56 from haneenmahd/patch-1
• da621e5 docs: fix example
• 744c0ce Merge branch 'master' of github.com:IonicaBizau/parse-url
• b0cda8b Add package-lock.json
• d6611ea Create FUNDING.yml
• b4c9d0e Delete .travis.yml
• 0ef0556 Create node.js.yml
• d04ad7d Update .travis.yml

Compare

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs